Development September 2023

development@lists.ipfire.org

10 participants
82 discussions

[PATCH] fhs.c: Correct permissions for /var/mail and /tmp
by Adolf Belka 15 Sep '23

15 Sep '23

- /var/mail is looking for 0755 but dma is setting 02775 checking FHS it looks like the settings should be 02775 - /tmp is being checked for 1755 instead of 01755 so the number is not being recognised as octal but as decimal - The /var/mail change confirmed to allow dma to be built in ipfire3.x without failing for FHS errors Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- src/libpakfire/fhs.c | 26 ++++++++++++++------------ 1 file changed, 14 insertions(+), 12 deletions(-) diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c index 94fe6667..a7a62267 100644 --- a/src/libpakfire/fhs.c +++ b/src/libpakfire/fhs.c @@ -97,17 +97,19 @@ static const struct pakfire_fhs_check { { "/usr/lib/firmware/**", S_IFDIR, 0755, "root", "root", 0 }, // /var - { "/var", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/cache", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/db", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/empty", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/lib", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/log", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/mail", S_IFDIR, 0755, "root", "mail", 0 }, - { "/var/opt", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/run", S_IFLNK, 0755, "root", "root", 0 }, - { "/var/spool", S_IFDIR, 0755, "root", "root", 0 }, - { "/var/tmp", S_IFDIR, 0755, "root", "root", 0 }, + // The first 0 in the permissions defines that the number is octal whether + // three or four digits are used + { "/var", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/cache", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/db", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/empty", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/lib", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/log", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/mail", S_IFDIR, 02775, "root", "mail", 0 }, + { "/var/opt", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/run", S_IFLNK, 0755, "root", "root", 0 }, + { "/var/spool", S_IFDIR, 0755, "root", "root", 0 }, + { "/var/tmp", S_IFDIR, 0755, "root", "root", 0 }, // Do not allow any subdirectories in /var { "/var/*", 0, 0, NULL, NULL, PAKFIRE_FHS_MUSTNOTEXIST }, @@ -165,7 +167,7 @@ static const struct pakfire_fhs_check { { "/sys/**", 0, 0, NULL, NULL, PAKFIRE_FHS_MUSTNOTEXIST }, // /tmp - { "/tmp", S_IFDIR, 1755, "root", "root", 0 }, + { "/tmp", S_IFDIR, 01755, "root", "root", 0 }, { "/tmp/**", 0, 0, NULL, NULL, PAKFIRE_FHS_MUSTNOTEXIST }, // FHS Directories -- 2.42.0

1 0

[PATCH 1/2] kernel: enable CONFIG_INPUT_EUDEV
by Arne Fitzenreiter 15 Sep '23

15 Sep '23

this is needed for ACPI power button handling --- kernel/config-generic | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/config-generic b/kernel/config-generic index d8b106c43..dc255842c 100644 --- a/kernel/config-generic +++ b/kernel/config-generic @@ -2800,7 +2800,7 @@ CONFIG_INPUT_VIVALDIFMAP=y # # CONFIG_INPUT_MOUSEDEV is not set # CONFIG_INPUT_JOYDEV is not set -# CONFIG_INPUT_EVDEV is not set +CONFIG_INPUT_EVDEV=m # CONFIG_INPUT_EVBUG is not set # -- 2.39.2

1 1

[PATCH] spectre-meltdown-checker: Update to 0.46
by Peter Müller 15 Sep '23

15 Sep '23

See https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.46 for this version's release notes. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/spectre-meltdown-checker | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/spectre-meltdown-checker b/lfs/spectre-meltdown-checker index bfb429363..4bfe5274f 100644 --- a/lfs/spectre-meltdown-checker +++ b/lfs/spectre-meltdown-checker @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Spectre & Meltdown Vulnerability Checker -VER = 0.45 +VER = 0.46 THISAPP = spectre-meltdown-checker-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = spectre-meltdown-checker -PAK_VER = 6 +PAK_VER = 7 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 14d49f40458167ab9af04cc31c9a0b9f8cb5f1e9417f5ac0bab0290be01cf14a737c716d8d28873fee1870535c0b36a56dac2d39f2cc7a000d27f0643a94cff7 +$(DL_FILE)_BLAKE2 = 355469c2176fffa8fb40695b47174959c9112e66cd870545ed424ef7b6ef4c10a5aa94bfbc6912510c979e16b0f8a18c0b822200eb69e9ded8300305d779fa79 install : $(TARGET) -- 2.39.2

1 0

[PATCH 1/2] Tor: Update to 0.4.8.5
by Peter Müller 14 Sep '23

14 Sep '23

Changes in version 0.4.8.5 - 2023-08-30 Quick second release after the first stable few days ago fixing minor annoying bugfixes creating log BUG stacktrace. We also fix BSD compilation failures and PoW unit test. o Minor features (fallbackdir): - Regenerate fallback directories generated on August 30, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/08/30. o Minor bugfix (NetBSD, compilation): - Fix compilation issue on NetBSD by avoiding an unnecessary dependency on "huge" page mappings in Equi-X. Fixes bug 40843; bugfix on 0.4.8.1-alpha. o Minor bugfix (NetBSD, testing): - Fix test failures in "crypto/hashx" and "slow/crypto/equix" on x86_64 and aarch64 NetBSD hosts, by adding support for PROT_MPROTECT() flags. Fixes bug 40844; bugfix on 0.4.8.1-alpha. o Minor bugfixes (conflux): - Demote a relay-side warn about too many legs to ProtocolWarn, as there are conditions that it can briefly happen during set construction. Also add additional set logging details for all error cases. Fixes bug 40841; bugfix on 0.4.8.1-alpha. - Prevent non-fatal assert stacktrace caused by using conflux sets during their teardown process. Fixes bug 40842; bugfix on 0.4.8.1-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index f735b0ca4..d7be53a1c 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config SUMMARY = Anonymizing overlay network for TCP (The onion router) -VER = 0.4.8.4 +VER = 0.4.8.5 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 79 +PAK_VER = 80 DEPS = libseccomp @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e283d828fede259b1186b45214d466ff7ee79c835d68d0253537cd44b4dfdc4effe97ffb864d788eb0c65e7c09dc79673b1f191662c3641917a36af935cb9e7f +$(DL_FILE)_BLAKE2 = 71a4807284ecefc4a18d6bc15ce798844304f860338b786590779fb171f851d630e8af3114dbc84fe854561e0085dcb147b4dd87787988a8fb6c3628bfcc8175 install : $(TARGET) -- 2.39.2

1 1

[PATCH] logrotate: Rotate wtmp files monthly, and keep them for a year
by Peter Müller 14 Sep '23

14 Sep '23

This prevents "last" being rendered unusable, and allows for better and faster auditing of previous logins. Fixes: #13322 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/etc/logrotate.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/etc/logrotate.conf b/config/etc/logrotate.conf index 0b6b48573..c5f9883c7 100644 --- a/config/etc/logrotate.conf +++ b/config/etc/logrotate.conf @@ -15,9 +15,9 @@ include /etc/logrotate.d # wtmp /var/log/wtmp { - weekly + monthly create 0664 root utmp - rotate 1 + rotate 12 } /var/log/httpd/access_log /var/log/httpd/error_log /var/log/httpd/ssl_request_log /var/log/httpd/ssl_engine_log { -- 2.39.2

1 0

[PATCH] postfix: Update to version 3.8.2
by Adolf Belka 13 Sep '23

13 Sep '23

- Update from version 3.8.1 to 3.8.2 - Update of rootfile not required - Changelog 3.8.2 Bugfix (defect introduced: Postfix alpha, 19980207): the valid_hostname() check in the Postfix DNS client library was blocking unusual but legitimate wildcard names (*.name) in some DNS lookup results and lookup requests. Examples: name class/type result *.one.example IN CNAME *.other.example *.other.example IN A 10.0.0.1 *.other.example IN TLSA ..certificate info... Such syntax is blesed in RFC 1034 section 4.3.3. Bugfix (defect introduced: Postfix 3.0, 20140218): when an address verification probe fails during or after an opportunistic TLS handshake, don't enforce a minimum time-in-queue before falling back to plaintext. Problem reported by Serg. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/postfix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index f2ae45007..532ec37ca 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.8.1 +VER = 3.8.2 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 41 +PAK_VER = 42 DEPS = @@ -70,7 +70,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 83c043d6e74cbbf0c5d739838ff99d4905aa711b13483fe0f427956b962c432e6f76d9828b5c141260e210c9605ac260df950d273d5729c36666c935a3ed4518 +$(DL_FILE)_BLAKE2 = 233693e088901e8ed986e34d60b55fb6b786c37868095ab914e6049c5ad6aee09f07d3b5d1f2bec64d8570e215bb15196760d30074cd8ddfaeff3897ad117b81 install : $(TARGET) -- 2.42.0

1 0

[PATCH] alsa: Update to version 1.2.10
by Adolf Belka 13 Sep '23

13 Sep '23

- Update alsa-lib, alsa-utils & alsa-ucn-conf from version 1.2.9 to 1.2.10 - Update of rootfile - Changelog is too large to include here. Details can be found at https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/alsa | 35 ++++++++++++++++++++++++++++++++++ lfs/alsa | 14 +++++++------- 2 files changed, 42 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/packages/alsa b/config/rootfiles/packages/alsa index 8ec82d8c3..a18368e4a 100644 --- a/config/rootfiles/packages/alsa +++ b/config/rootfiles/packages/alsa @@ -141,6 +141,7 @@ usr/bin/aseqnet usr/bin/aserver usr/bin/axfer usr/bin/iecset +usr/bin/nhlt-dmic-info usr/bin/speaker-test #usr/include/alsa #usr/include/alsa/asoundef.h @@ -189,6 +190,8 @@ usr/bin/speaker-test #usr/include/alsa/sound/uapi/tlv.h #usr/include/alsa/timer.h #usr/include/alsa/topology.h +#usr/include/alsa/ump.h +#usr/include/alsa/ump_msg.h #usr/include/alsa/use-case.h #usr/include/alsa/version.h #usr/include/asoundlib.h @@ -572,6 +575,9 @@ usr/share/alsa/ucm2/Rockchip/max98090/max98090.conf #usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound/HiFi.conf usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound/rk3399-gru-sound.conf +#usr/share/alsa/ucm2/Rockchip/rk3588-es8316 +usr/share/alsa/ucm2/Rockchip/rk3588-es8316/HiFi.conf +usr/share/alsa/ucm2/Rockchip/rk3588-es8316/rk3588-es8316.conf #usr/share/alsa/ucm2/Rockchip/rk817-sound usr/share/alsa/ucm2/Rockchip/rk817-sound/HiFi.conf usr/share/alsa/ucm2/Rockchip/rk817-sound/rk817-sound.conf @@ -584,9 +590,16 @@ usr/share/alsa/ucm2/Samsung/snow/snow.conf usr/share/alsa/ucm2/Tegra/alc5632/HiFi.conf usr/share/alsa/ucm2/Tegra/alc5632/Record.conf usr/share/alsa/ucm2/Tegra/alc5632/alc5632.conf +#usr/share/alsa/ucm2/Tegra/max98089 +usr/share/alsa/ucm2/Tegra/max98089/lge-x3-HiFi.conf +usr/share/alsa/ucm2/Tegra/max98089/lge-x3-VoiceCall.conf +usr/share/alsa/ucm2/Tegra/max98089/lge-x3.conf #usr/share/alsa/ucm2/Tegra/max98090 usr/share/alsa/ucm2/Tegra/max98090/HiFi.conf usr/share/alsa/ucm2/Tegra/max98090/max98090.conf +#usr/share/alsa/ucm2/Tegra/rt5631 +usr/share/alsa/ucm2/Tegra/rt5631/Asus-Transformer-HiFi.conf +usr/share/alsa/ucm2/Tegra/rt5631/Asus-Transformer.conf #usr/share/alsa/ucm2/Tegra/rt5640 usr/share/alsa/ucm2/Tegra/rt5640/Google-Nexus-7-HiFi.conf usr/share/alsa/ucm2/Tegra/rt5640/Google-Nexus-7.conf @@ -596,6 +609,8 @@ usr/share/alsa/ucm2/Tegra/tegra-hda/tegra-hda.conf #usr/share/alsa/ucm2/Tegra/wm8903 usr/share/alsa/ucm2/Tegra/wm8903/Acer-A500-HiFi.conf usr/share/alsa/ucm2/Tegra/wm8903/Acer-A500.conf +usr/share/alsa/ucm2/Tegra/wm8903/Asus-Transformer-HiFi.conf +usr/share/alsa/ucm2/Tegra/wm8903/Asus-Transformer.conf #usr/share/alsa/ucm2/USB-Audio #usr/share/alsa/ucm2/USB-Audio/Arturia usr/share/alsa/ucm2/USB-Audio/Arturia/Minifuse-12-HiFi.conf @@ -667,6 +682,9 @@ usr/share/alsa/ucm2/USB-Audio/Steinberg/UR24C.conf usr/share/alsa/ucm2/USB-Audio/Steinberg/UR44-HiFi.conf usr/share/alsa/ucm2/USB-Audio/Steinberg/UR44.conf usr/share/alsa/ucm2/USB-Audio/USB-Audio.conf +#usr/share/alsa/ucm2/USB-Audio/UniversalAudio +usr/share/alsa/ucm2/USB-Audio/UniversalAudio/Volt2-HiFi.conf +usr/share/alsa/ucm2/USB-Audio/UniversalAudio/Volt2.conf #usr/share/alsa/ucm2/codecs #usr/share/alsa/ucm2/codecs/cx2072x usr/share/alsa/ucm2/codecs/cx2072x/DisableSeq.conf @@ -836,6 +854,10 @@ usr/share/alsa/ucm2/conf.d/acp/acp.conf usr/share/alsa/ucm2/conf.d/acp3xalc5682m98/acp3xalc5682m98.conf #usr/share/alsa/ucm2/conf.d/acp5x usr/share/alsa/ucm2/conf.d/acp5x/Valve-Jupiter-1.conf +#usr/share/alsa/ucm2/conf.d/acp62 +usr/share/alsa/ucm2/conf.d/acp62/acp62.conf +#usr/share/alsa/ucm2/conf.d/acp63 +usr/share/alsa/ucm2/conf.d/acp63/acp63.conf #usr/share/alsa/ucm2/conf.d/acp6x usr/share/alsa/ucm2/conf.d/acp6x/acp6x.conf #usr/share/alsa/ucm2/conf.d/bdw-rt5677 @@ -878,6 +900,8 @@ usr/share/alsa/ucm2/conf.d/mt8365-evk/mt8365-evk.conf usr/share/alsa/ucm2/conf.d/mtk-rt5650/mtk-rt5650.conf #usr/share/alsa/ucm2/conf.d/rk3399-gru-soun usr/share/alsa/ucm2/conf.d/rk3399-gru-soun/rk3399-gru-soun.conf +#usr/share/alsa/ucm2/conf.d/rk3588-es8316 +usr/share/alsa/ucm2/conf.d/rk3588-es8316/rk3588-es8316.conf #usr/share/alsa/ucm2/conf.d/rockchip_es8316 usr/share/alsa/ucm2/conf.d/rockchip_es8316/rockchip_es8316.conf #usr/share/alsa/ucm2/conf.d/sc8280xp @@ -915,9 +939,18 @@ usr/share/alsa/ucm2/conf.d/sof-soundwire/sof-soundwire.conf usr/share/alsa/ucm2/conf.d/tegra-hda/tegra-hda.conf usr/share/alsa/ucm2/conf.d/tegra/ASUS Google Nexus 7 ALC5642.conf usr/share/alsa/ucm2/conf.d/tegra/Acer Iconia Tab A500 WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus EeePad Slider WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus EeePad Transformer WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Infinity TF700T RT5631.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300T WM8903.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300TG RT5631.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300TL RT5631.conf +usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Prime TF201 RT5631.conf usr/share/alsa/ucm2/conf.d/tegra/Compal PAZ00.conf usr/share/alsa/ucm2/conf.d/tegra/GoogleNyanBig.conf usr/share/alsa/ucm2/conf.d/tegra/GoogleNyanBlaze.conf +usr/share/alsa/ucm2/conf.d/tegra/LG Optimus 4X HD MAX98089.conf +usr/share/alsa/ucm2/conf.d/tegra/LG Optimus Vu MAX98089.conf #usr/share/alsa/ucm2/conf.virt.d usr/share/alsa/ucm2/conf.virt.d/.gitignore #usr/share/alsa/ucm2/lib @@ -963,6 +996,7 @@ usr/share/alsa/ucm2/ucm.conf #usr/share/locale/ja/LC_MESSAGES/alsaconf.mo #usr/share/locale/ka/LC_MESSAGES/alsa-utils.mo #usr/share/locale/ka/LC_MESSAGES/alsaconf.mo +#usr/share/locale/ko/LC_MESSAGES/alsa-utils.mo #usr/share/locale/ru/LC_MESSAGES/alsaconf.mo #usr/share/locale/sk/LC_MESSAGES/alsa-utils.mo #usr/share/man/fr/man8/alsaconf.8 @@ -984,6 +1018,7 @@ usr/share/alsa/ucm2/ucm.conf #usr/share/man/man1/axfer-transfer.1 #usr/share/man/man1/axfer.1 #usr/share/man/man1/iecset.1 +#usr/share/man/man1/nhlt-dmic-info.1 #usr/share/man/man1/speaker-test.1 #usr/share/man/man8/alsaconf.8 #usr/share/sounds diff --git a/lfs/alsa b/lfs/alsa index 7931a94fc..a0a517ed8 100644 --- a/lfs/alsa +++ b/lfs/alsa @@ -26,9 +26,9 @@ include Config SUMMARY = Advanced Linux Sound Architecture -VER = 1.2.9 -UVER = 1.2.9 -CVER = 1.2.9 +VER = 1.2.10 +UVER = 1.2.10 +CVER = 1.2.10 FVER = 1.2.4 VERSUFIX = ipfire$(KCFG) @@ -38,7 +38,7 @@ DL_FILE = $(THISAPP).tar.bz2 DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) PROG = alsa -PAK_VER = 17 +PAK_VER = 18 DEPS = @@ -58,10 +58,10 @@ alsa-utils-$(UVER).tar.bz2 = $(DL_FROM)/alsa-utils-$(UVER).tar.bz2 alsa-firmware-$(FVER).tar.bz2 = $(DL_FROM)/alsa-firmware-$(FVER).tar.bz2 alsa-ucm-conf-$(CVER).tar.bz2 = $(DL_FROM)/alsa-ucm-conf-$(CVER).tar.bz2 -$(DL_FILE)_BLAKE2 = ec0c6966802196016679652292a579c6301cce33a2e887fce79cdb80629b6df047269787445cf0645e6cf43d3d2aae8fa57ddad5ab79fc254ee65a0ed695f449 -alsa-utils-$(UVER).tar.bz2_BLAKE2 = 9d75f63c7ff8b0d7ee835a1ad8fc242dee9b59770b1ad0ff9cd233caf50ac844323fb2ebb8e649f03a0a30a161ec72cba472ac79e390c3f0eb6e2a184d8f576c +$(DL_FILE)_BLAKE2 = b2e4f8431e61f5bb56b2b5d124e67d5a68bbca3c647bebfa93f5e5ff092ec9ef3f6cb6315801fcd93e21151784814ff238d357313b8b44f32d4e7c9ee565388f +alsa-utils-$(UVER).tar.bz2_BLAKE2 = 077b4ad090c1ab40dd4fa22db01ae2a080ca849a5564dfe612654993297c80bd3584541c7e68aaad56c4c05538ba0de449e4677b1c4a9dfe56d8e11706c4ca35 alsa-firmware-$(FVER).tar.bz2_BLAKE2 = 0f844f6cc4859b72635f24d347b4c790469aee39aa60d9addb2c168dcf06b48e7e3cbba26ff21c7e1f5aa355641eec7ab934cb09bfac8ca116a6ac6a7db9d548 -alsa-ucm-conf-$(CVER).tar.bz2_BLAKE2 = fe71790aa8658ab12378baa55f95a03aaebd3eb0aef2535b65b89884de6cb404a75b44fd238d2089e0a005ca81720f3c44d1912452908e97aa75fcda513908cf +alsa-ucm-conf-$(CVER).tar.bz2_BLAKE2 = 215842f1f59c2dea5e3f3fe880dc49d6263998746a50c2591b8a9786ead3afae2c713e179ff6e8caa518b3a8516a1b031872c1fad2a17fbd3afbb0390a803693 install : $(TARGET) -- 2.42.0

2 7

[PATCH] extrahd.cgi: Fix broken UUID check
by Stefan Schantl 13 Sep '23

13 Sep '23

This check was totaly broken and resulted into not beeing able to configure/mount more than one extra harddrive. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- html/cgi-bin/extrahd.cgi | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/html/cgi-bin/extrahd.cgi b/html/cgi-bin/extrahd.cgi index 9cdfc69f8..c3a14c9e4 100644 --- a/html/cgi-bin/extrahd.cgi +++ b/html/cgi-bin/extrahd.cgi @@ -113,13 +113,16 @@ if ($extrahdsettings{'ACTION'} eq $Lang::tr{'add'}) { # Split the line into pieces and assign nice variables. my ($uuid, $fs, $path) = split( /\;/, $entry ); + # Remove tailing UUID= from uuid string. + $uuid =~ s{^UUID=}{}; + # Check if the path is allready used. if ( "$extrahdsettings{'PATH'}" eq "$path" ) { $errormessage = "$Lang::tr{'extrahd you cant mount'} $extrahdsettings{'DEVICE'} $Lang::tr{'extrahd to'} $extrahdsettings{'PATH'} $Lang::tr{'extrahd because there is already a device mounted'}."; } # Check if the uuid is allready used. - if ("$extrahdsettings{'DEVICE'} eq $uuid") { + if ("$extrahdsettings{'UUID'}" eq "$uuid") { $errormessage = "$extrahdsettings{'DEVICE'} is allready mounted."; } } -- 2.39.2

2 1

[PATCH] Add Ellio Community feed to ipblocklist/sources
by Ayush Tomar 13 Sep '23

13 Sep '23

From 13c58a87843a73df34d370edc7c505eb6b6c60f3 Mon Sep 17 00:00:00 2001 From: Ayush Tomar <ayush.tomar(a)ellio.tech> Date: Wed, 13 Sep 2023 11:32:43 +0200 Subject: [PATCH] Add Ellio Community feed to ipblocklist/sources --- config/ipblocklist/sources | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index be0cf0229..26699ff56 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -67,6 +67,12 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name' => 'Emerging Threats Blocklis 'parser' => 'dshield', 'rate' => '1h', 'category' => 'attacker' }, + 'ELLIO_TECH' => {'name' => 'ELLIO: IP Feed (Community version)', + 'url' => 'https://cdn.ellio.tech/community-feed', + 'info' => 'https://ellio.tech', + 'parser' => 'ip-or-net-list', + 'rate' => '24h', + 'category' => 'attacker' }, 'FEODO_RECOMMENDED'=> {'name' => 'Feodo Trojan IP Blocklist (Recommended)', 'url' => 'https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt', 'info' => 'https://feodotracker.abuse.ch/blocklist', -- 2.39.2 (Apple Git-143

2 1

test of lzo option in OpenVPN
by Adolf Belka 12 Sep '23

12 Sep '23

Hi All, As discussed in the conf call I did a test of the LZO option and the result was not what I had hoped for, at least with Network Manager - openvpn plugin. Using my vm testbed, I created a client with LZO option enabled. I made an opnvpn connection which was successful and worked. Then I disabled LZO on the server but left the client as it was. Remade the connection. The connection showed as CONNECTED in the openvpn WUI page but in my Arch Linux log for the network manager I got a periodic message of nm-openvpn[1266]: Bad LZO decompression header byte: 42 Additionally trying to use the browser through the tunnel failed with the web sites timing out. So at least with Network Manager Openvpn plugin turning LZO off on the server ,when the client has it specified, does not work the way we discussed. I will do a further test with openvpn directly on the command line but if one openvpn client doesn't accept LZO being turned off on the server if it is enabled in the client this means we can't remove the LZO option and default it to disabled on the WUI page. Regards, Adolf. -- Sent from my laptop

2 7

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2023